Checking that pesky ‘data mapping’ box

France’s data protection authority, the CNIL, has produced a helpful six-step methodology for organizations preparing to comply with the EU’s General Data Protection Regulation. At the top of the list is appointing a DPO. Check.